Security Clearance required:

No clearance required

Do you want to make a difference? 
Cognosante employees are passionate about improving people’s lives. With an innovative mindset and an unwavering commitment to those we serve, we partner with healthcare, civilian and defense agencies to deliver exceptional public services and programs. Our multi-faceted technology and customer experience (CX) solutions achieve program outcomes, solve critical challenges and create meaningful change. Whether we are helping Veterans access healthcare faster, ensuring that members of the military complete their missions safely, or helping people obtain health insurance, our work touches millions of people. Are you ready to make a difference?

Cognosante IT is looking for a Senior Information Security Analyst to join our infrastructure team to further grow our capabilities and security posture. The infrastructure group is responsible for the architecture, engineering, and operations of the internal systems in place to support the staff and customers of the organization. We’re looking for a talented individual contributor that loves working in a team, solving complex problems, and love technology.

What is the position?

The Senior Information Security Analyst  is responsible for a wide range of activities related to designing, implementing, managing, and monitoring corporate and customer network environments. As a member of the Cognosante Core Engineering team, the Senior Information Security Analyst will collaborate with his peers and management on the acquisition, implementation, and management of security solutions for endpoint protection, anti-malware, URL filtering, and security incident and event management.  Typical tasks associated with this role include configuring and administering network devices and servers, monitoring security applications, developing, and updating technical documentation, and reviewing audit logs and other network monitoring data. The Senior Information Security Analyst will also perform routine and ad hoc vulnerability scans and configuration checks of network components and will collaborate with other IT operations staff to evaluate and determine appropriate responses to results from scans or other types of tests. This role may contribute to the development of solution architectures for projects executed on behalf of customers. The Senior Information Security Analyst will maintain continuous awareness of new and existing security threats and vulnerabilities and helps determine their relevance to company operations.

What will I get to do? 

• Analyze systems, data, and operating environments to determine appropriate security controls
• Deploy, maintain, and troubleshoot firewalls, intrusion detection/prevention, VPN, vulnerability assessment tools, event and log analysis, security change tracking and other network security systems and devices
• Review and provide risk-analysis for requests for network access, changes in or exceptions to firewall rules, device configuration changes, etc.
• Coordinate with business development/solution teams and project teams to effectively integrate security into technical solution designs and operational practices
• Research and design security solutions to technical and business problems
• Investigate and deploy open-source and commercial tools to enhance company security posture
• Use security tools to hunt for threats, audit infrastructure, detect issues and coordinate remediation of any issues
• Develop, refine, and perform analysis to discover new or potential incidents and report results
• Ensure 100% deployment of security agent software to Cognosante endpoints
• Follow, develop and improve network and security configuration procedures
• Stay abreast of security concerns/issues, threat and vulnerability alerts, and vendor notifications and regularly update IT and operations leadership
• Create and maintain documentation and provide detailed records of activities and findings for remediation/mitigation procedures
• Review system architecture and system design documentation to identify security-relevant aspects of systems and solutions and accurately reflect that information in security documentation
• Engage in threat hunting and threat remediation
• Engage in Incident Response and Security Event Monitoring as required.

What qualifications do I need?

• Bachelor’s Degree or equivalent experience
• 5 years relevant experience in IT, Security, or Compliance
• One or more certifications relevant to networks, IT infrastructure, and security, such as Network+, MSCE, or CCNA
• Familiarity with government and industry standards related to security, including NIST Federal Information Processing Standards and the 800 series of Special Publications